Frequently asked questions about DoS and DDoS attacks on Xbox 360

Overview

If you play games on Xbox Live, you may experience a denial-of-service (DoS) attack or a distributed denial-of-service (DDoS) attack. These attacks may render your Xbox 360 console or your computer temporarily unable to connect to the Internet or to Xbox Live.

If you have an Xbox Live account, your Xbox 360 console could experience a DoS or DDoS attack from another Xbox Live account. These attacks are sometimes used as retaliation between Xbox Live gameplayers.

If you think you've experienced a DoS or DDoS attack, we recommend that you reset your Internet router and contact your Internet Service Provider (ISP). If you know who initiated the DoS or DDoS attack, you may also want to submit a player review to Xbox Live and avoid the attacker in the future.

What is a DoS or DDoS attack?

In a DoS attack, the attacker floods the IP address of the targeted device (usually an Xbox 360 console or a computer) with external, useless communication requests, thereby leaving it unable to connect to the Internet and Xbox Live. The attack is not directed at Xbox Live. Instead, it is directed at the IP address of the targeted device.

In a DDoS attack, the attacker uses malicious code installed on multiple computers to identify and attack the target device. Attackers who initiate a DDoS attack do so to have a greater effect on the targeted device than a DoS attack initiated from a single device.

How do I know whether I've experienced an attack?

If your Xbox 360 console experiences a DoS or DDoS attack, you probably won't be able to connect to Xbox Live from your console. All Internet connectivity in your household will be down.

What should I do if I think I've been attacked?

If you believe that your Xbox 360 console or computer has experienced one of these kinds of attacks, you should do the following:

Reset your Internet router:

Unplug the power cable from the back of the router. (If you have a router and a modem, remove the power cable from both devices.)

Wait at least 5 minutes, and then plug in the modem first. Wait for all of the lights to return to their normal state.

Plug in the router and wait for all of the lights to return to their normal state.

What can I do to stop the attack?

If you're currently experiencing a DoS or DDoS attack, try resetting your Internet router and DSL or cable modem. (See “What should I do if I think I've been attacked?” above.) This may resolve the attack. A proper reset involves removing the power source for 5 to 10 minutes. This will increase the likelihood that you'll get a new IP address that the attacker won't have access to.

If you try the above and still experience the DoS or DDoS attack, contact your ISP to report the attack.

How can I find out who attacked me?

To determine the identity of the individual who initiated a DoS or DDoS attack on your Xbox 360 console or your computer, contact your ISP.

Note DoS and DDoS attacks are sometimes used as retaliation following online multiplayer gameplay. DoS and DDoS attackers also sometimes threaten the players whose devices they later attack with comments such as "I'm going to IP boot you", "I'm going to flood your IP" or "I'm going to boot you off the Internet".

If you believe you know the identity of the attacker, you may want to submit a player review, avoid the threatening individual in the future and play online games only with friends and trusted individuals.

Can a support agent determine whether I've experienced an attack?

If your Xbox 360 console or your computer experiences a DoS or DDoS attack, Xbox Support agents won't be able to determine the identity of the attacker.

To determine the identity of the DoS or DDoS attacker, contact your ISP.

What can Xbox Live do to prevent these attacks?

DoS and DDoS attacks don't happen in the Xbox Live service. Instead, they happen through the IP address of the attacked device.

For more information about preventing DoS and DDoS attacks, contact your ISP.